Spaces method and path for this operation:
put /s/{space_id}/api/exception_lists
Refer to Spaces for more information.
Update an exception list using the id or list_id field.
Body
Required
Exception list's properties
-
A string that does not contain only whitespace characters
Minimum length is
1. -
A string that does not contain only whitespace characters
Minimum length is
1. -
Additional properties are allowed.
-
Determines whether the exception container is available in all Kibana spaces or just the space in which it is created, where:
single: Only available in the Kibana space in which it is created.agnostic: Available in all Kibana spaces.
Values are
agnosticorsingle. -
Values are
linux,macos, orwindows. -
Values are
detection,rule_default,endpoint,endpoint_trusted_apps,endpoint_events,endpoint_host_isolation_exceptions, orendpoint_blocklists. -
Minimum value is
1.
PUT
/api/exception_lists
curl \
--request PUT 'https://localhost:5601/api/exception_lists' \
--header "Authorization: $API_KEY" \
--header "Content-Type: application/json" \
--data '{
"_version": "string",
"description": "string",
"id": "string",
"list_id": "string",
"meta": {},
"name": "string",
"namespace_type": "agnostic",
"os_types": [
"linux"
],
"tags": [
"string"
],
"type": "detection",
"version": 42
}'